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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH{S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )^ Responsive to communication(s) filed on 30 November 2004 . 
2a)S This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal nnatters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 21 3. 

Disposition of Claims 

4) ^ Claim(s) 1-24 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) ^ Claim(s) 1-24 is/are rejected. 

Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)^ accepted or b)\3 objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) Including the correction is required if the drawlng(s) is objected to. See 37 CFR 1 .121(d). 

1 1) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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1 -□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 
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application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . An amendment was received on 30 November 2004. Claims 1,2,4,5, 10, 11, 
and 16-24 have been amended. No claims have been added or canceled. Claims 1-24 
are currently pending in the present application. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1-24 have been considered but are 
moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC §112 

3. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or nnore claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

4. Claim 22 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

Claim 22 recites the limitation "said formed link" in line 10. There is insufficient 
antecedent basis for this limitation in the claims. 
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Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the Invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

6. Claims 1-9, 11-15, 18, 20, 21, 23, and 24 are rejected under 35 U.S.C. 102(b) as 
being anticipated by Levergood et al, US Patent 5708780 (cited in the previous Office 
action). 

In reference to Claim 1, Levergood discloses a system including an input 
processor that receives an encryption key (column 5, lines 61-65), a URL processor that 
adaptively processes a URL link to a second application by encrypting a URL address 
portion (column 5, lines 61-65; column 3, lines 34-37, noting that the SID includes an 
accessible domain that is included under the digital signature; and column 4, lines 1-18) 
and by not further encrypting a link within the first application (column 3, lines 59-67), 
and a communication processor that includes the processed URL in web page data 
(column 6, lines 17-26). 

In reference to Claim 2, Levergood further discloses the encryption key is 
accessible to multiple applications from a managing application (column 5, lines 61-65, 
where the key is shared by the authentication and content servers). 
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In reference to Claim 3, Levergood further discloses communicating the address 
portion to a managing application for encryption (column 5, lines 44-49, for example, 
where the request is redirected to an authentication server). 

In reference to Claim 4, Levergood further discloses that the URL processor 
adaptively processes the URL link in response to an identified URL type (see column 3, 
line 56-column 4, line 24). 

In reference to Claim 5, Levergood further discloses that a URL link can include 
an encrypted portion and a non-encrypted portion (column 5, lines 52-54, where [SID] 
includes an encrypted digital signature). 

In reference to Claim 6, Levergood further discloses a browser application 
providing a user interface for providing user identification information (column 6, lines 
44-47) and authenticating the user identification information (column 6, lines 36-42). 

In reference to Claims 7 and 8, Levergood further discloses compressing the 
address portion with a hash function (column 5, lines 61-65). 

In reference to Claim 9, Levergood further discloses communicating the address 
portion to a managing application for compression (column 5, lines 44-49, for example, 
where the request is redirected to an authentication server). 

In reference to Claim 1 1 , Levergood discloses a system that includes a 
managing application providing a common encryption key to a plurality of applications 
(column 5, lines 61-65, where the key is shared by the authentication and content 
servers). Levergood further discloses an application including an input processor that 
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receives an encryption key (column 5, lines 61-65), a URL processor that adaptively 
processes a URL link to a second application by encrypting a URL address portion 
(column 5, lines 61-65; column 3, lines 34-37, noting that the SID includes an 
accessible domain that is included under the digital signature; and column 4, lines 1-18) 
and by not further encrypting a link within the first application (column 3, lines 59-67), 
and a communication processor that includes the processed URL in web page data 
(column 6, lines 17-26). 

In reference to Claim 12, Levergood further discloses communicating the 
address portion to the managing application for encryption (column 5, lines 44-49, for 
example, where the request is redirected to an authentication server). 

In reference to Claims 13 and 14, Levergood further discloses compressing the 
address portion with a hash function (column 5, lines 61-65). 

In reference to Claim 15, Levergood further discloses communicating the 
address portion to the managing application for compression (column 5, lines 44-49, for 
example, where the request is redirected to an authentication server). 

In reference to Claim 18, Levergood discloses an application including a URL 
processor that adaptively processes a URL link to a second application by encrypting a 
URL address portion (column 5, lines 61-65; column 3, lines 34-37, noting that the SID 
includes an accessible domain that is included under the digital signature; and column 
4, lines 1-18) and by not further encrypting a link within the first application (column 3, 
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lines 59-67), and a communication processor that includes the processed URL in web 
page data (column 6, lines 17-26). 

In reference to Claim 20, Levergood discloses a system including a browser that 
includes a user interface for providing user identification information (column 6, lines 44- 
47), a URL generator for generating a URL with an encrypted URL address portion 
(column 5, lines 61-65) and a session identifier (see, for example, column 3, lines 11- 
16), and a processor communicating the generated URL once the user identification 
information is validated (column 6, lines 44-57), where the application receiving the URL 
has access to the key (column 5, lines 61-65, where the key is shared by the 
authentication and content servers). 

Claims 21 and 23 are directed to methods corresponding substantially to the 
systems of Claims 1 and 1 1 , respectively, and are rejected by a similar rationale. 

In reference to Claim 24, Levergood discloses a method including adaptively 
processing a URL link to a second application by encrypting a URL address portion 
(column 5, lines 61-65; column 3, lines 34-37, noting that the SID includes an 
accessible domain that is included under the digital signature; and column 4, lines 1-18) 
and by not further encrypting a link within the first application (column 3, lines 59-67), 
providing a key to the second application (column 5, lines 61-65, where the key is 
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shared by the authentication and content sen/ers), and including the generated URL in 
web page data (column 6, lines 17-26). 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. Claims 10, 16, 17, 19, and 22 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Levergood in view of Berman et al, US Patent 5995939. 

In reference to Claim 10, Levergood discloses everything as applied to Claim 1 
above. Levergood further discloses encrypting a user identifier (column 3, lines 34-37, 
noting that the SID includes a user identifier that is included under the digital signature). 
However, Levergood does not explicitly disclose encrypting patient information for 
inclusion in the URL. Berman discloses a system that includes compressing and 
encrypting messages containing patient specific information (column 6, lines 2-15). 
Therefore, it would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the system of Levergood by including patient data as the 
user information that is encrypted and compressed, in order to ensure the confidentiality 
of sensitive data (see Berman, column 2, lines 61-63). 
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In reference to Clainn 16, Levergood discloses a system including a browser 
application providing a user interface for providing user identification information 
(column 6, lines 44-47). Levergood further discloses an application including a URL 
processor that encrypts a URL address portion (column 5, lines 61-65; column 3, lines 
34-37, noting that the SID includes an accessible domain that is included under the 
digital signature; and column 4, lines 1-18) and a communication processor that 
includes the processed URL in web page data (column 6, lines 17-26). Levergood 
further discloses encrypting a user identifier (column 3, lines 34-37, noting that the SID 
includes a user identifier that is included under the digital signature). However, 
Levergood does not explicitly disclose encrypting patient information for inclusion in the 
URL. Berman discloses a system that includes compressing and encrypting messages 
containing patient specific information (column 6, lines 2-15). Therefore, it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
modify the system of Levergood by including patient data as the user information that is 
encrypted and compressed, in order to ensure the confidentiality of sensitive data (see 
Berman, column 2, lines 61-63). 

In reference to Claim 17, Levergood further discloses communicating information 
to another application for encryption (column 5, lines 44-49, for example, where the 
request is redirected to an authentication server). , 

In reference to Claim 19, Levergood discloses everything as applied to Claim 18 
above. Levergood further discloses encrypting a user identifier (column 3, lines 34-37, 
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noting that the SID includes a user identifier that is included under the digital signature). 
However, Levergood does not explicitly disclose encrypting patient information for 
inclusion in the URL. Berman discloses a system that includes compressing and 
encrypting messages containing patient specific information (column 6, lines 2-15). 
Therefore, it would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the system of Levergood by including patient data as the 
user information that is encrypted and compressed, in order to ensure the confidentiality 
of sensitive data (see Berman, column 2, lines 61-63). 

In reference to Claim 22, Levergood discloses a method including enabling a first 
application based on validation of user authentication information (column 6, lines 36- 
42), forming a URL by encrypting a link to a second application and including the 
encrypted link and session identification information in the formed URL (column 5, lines 
52-54 and 61-65), including the link in data representing a web page, and 
communicating the web page data (column 6, lines 17-26). Levergood further discloses 
encrypting a user identifier (column 3, lines 34-37, noting that the SID includes a user 
identifier that is included under the digital signature). However, Levergood does not 
explicitly disclose encrypting patient information for inclusion in the URL. Berman 
discloses a method that includes compressing and encrypting messages containing 
patient specific information (column 6, lines 2-15). Therefore, it would have been 
obvious to one of ordinary skill in the art at the time the invention was made to modify 
the method of Levergood by including patient data as the user information that is 
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encrypted and compressed, in order to ensure the confidentiality of sensitive data (see 
Berman, column 2, lines 61-63). 

Conclusion 

9. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Behram et al, US Patent 5499293, discloses a device for storing 
confidential information, such as patient information, in compressed and 
encrypted form. 

b. Callahan et al, US Patent 5949491 , discloses a system that includes 
compression and encryption of patient data. 

10. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 

§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 



Application/Control Number: 09/817,323 



Page 1 1 



Art Unit: 2137 

extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Zachary A Davis whose telephone number is (571) 272- 
3870. The examiner can normally be reached on weekdays 8:30-6:00, alternate 
Fridays off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Caldwell can be reached on (571) 272-3868. The fax phone 
number for the organization where this application or proceeding is assigned is 703- 



Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



872-9306. 





ANDREW CALDWELL 
SUPERVISORY RflJENT EXAMINER 



